2d4beece65e50c40a1af70bbc23d40e9_JaffaCakes118 | Triage

Sharing

General

Target

2d4beece65e50c40a1af70bbc23d40e9_JaffaCakes118
Size

36KB
MD5

2d4beece65e50c40a1af70bbc23d40e9
SHA1

415d5fe795a9d63bbcb77ca20e608f50c1573d0a
SHA256

1650fddd6d56c0b1b642b95834124b65a788914e0ee7c2e23bf03c75df939a45
SHA512

18a2788ccd8def05a2617a4b8bb1f4a7f7f4a98bc728d5310e7012768e1315ff3e55cbd8c3e844c6fcdd6cefe1bba3feaf5e84305b9c5071b7ba626651cd23a5
SSDEEP

768:1ew6nYXar8c3t++68pAI3D5nkJ3QBNMfcszkXcyWVV4:owDXIt++68WI3D5kJ3QQN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2d4beece65e50c40a1af70bbc23d40e9_JaffaCakes118

Files

2d4beece65e50c40a1af70bbc23d40e9_JaffaCakes118
.exe windows:4 windows x86 arch:x86

6ecfabab713df0aa44f2dc3e07a2f1b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvbvm60

ord690
MethCallEngine
ord558
ord593
ord598
ord631
EVENT_SINK_AddRef
DllFunctionCall
EVENT_SINK_Release
ord600
EVENT_SINK_QueryInterface
__vbaExceptHandler
ord711
ord607
ord608
ProcCallEngine
ord535
ord537
ord573
ord100
ord689
ord616
ord619
ord581

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ